$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa File: 43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa (raw, json) Hash identifier: rU8wRowWEWEWjD+xdoxn2lnPymNGTwfjb+QPz3Ubk7Q= Subject key identifier: 92:71:95:44:9D:A3:69:63:72:CC:A5:D7:7D:35:5F:50:9D:B7:02:CD Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A8B0B5AA6429391EB892B83C0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 64267 IP address blocks: 149.20.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:5a:a6:42:93:91:eb:89:2b:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=27c040b1-94cb-4125-9310-9b63f6ec5d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0c:41:49:97:ac:d7:41:8a:dd:e3:f2:92:9a: 25:44:ba:ce:42:22:12:06:a0:d3:11:f4:03:de:2f: 27:ba:e4:c6:3c:09:7a:7a:43:82:2e:e9:5e:7f:e2: 98:e7:47:a6:a5:c0:7a:b8:a8:ad:5d:96:62:a4:0b: 74:e1:45:e7:04:13:00:d7:88:66:f9:ad:c9:a2:a6: 50:d5:9a:4c:1c:4a:b8:fa:38:d4:10:c9:39:69:1a: c9:11:d6:26:ed:d4:2a:05:21:5e:57:62:6e:b5:d1: 8b:cd:a0:0c:96:b4:f6:f9:b0:c7:64:b2:43:26:fa: 7b:0f:fd:66:10:85:5c:5a:53:bc:4b:81:b7:e8:3c: aa:f0:6b:84:ad:e3:04:7b:b5:20:32:c7:d7:24:d0: fd:26:21:c8:b0:b3:09:03:cb:7b:43:a8:e5:f9:4c: 37:cd:8c:20:f7:c3:0e:d3:c6:4c:2c:21:4e:c2:04: 3c:c2:28:13:e1:22:9e:fd:3c:1b:3f:c6:7e:bd:12: 70:83:f2:61:3e:a6:29:b7:7e:37:33:f9:9e:e4:8a: 64:a1:cc:d7:cb:86:2c:11:58:d2:1e:59:9a:8b:a9: 12:a0:5c:46:fa:f3:b8:97:b9:25:ad:88:46:b1:ab: d9:a7:d5:fb:1c:4d:58:82:6c:97:71:da:2e:25:2f: b5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:71:95:44:9D:A3:69:63:72:CC:A5:D7:7D:35:5F:50:9D:B7:02:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/43e0904e-b3dd-39b5-a5f5-e237e38bb540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:9a:20:b4:ef:ef:ab:73:6a:4e:7a:2e:6c:32:51:f1:b5:b8: 21:17:a2:c0:8b:ac:4e:22:a2:c2:05:07:e3:45:bf:08:1f:8f: c7:e9:06:61:62:7d:86:6e:71:00:c2:00:7c:3b:ae:03:77:57: 74:d2:cb:04:bc:01:05:77:c7:00:71:48:db:52:85:b2:bf:bc: 86:f5:4d:85:4e:91:05:aa:6c:0f:24:da:4a:89:29:70:9d:ee: 77:fb:f2:ab:8f:17:af:d9:41:86:b3:e1:3f:32:8d:64:9b:d3: 2b:77:55:3f:6f:ae:c5:c9:f0:8a:ec:92:52:ae:71:c8:bd:0e: 0d:02:61:4c:86:a1:c8:2b:bf:0e:ca:e8:fd:81:a7:7f:a8:32: 35:3b:e9:55:dd:9a:6b:a1:1b:8e:98:2a:d1:9a:da:b3:b7:ce: f7:f9:35:06:10:a9:35:e4:34:da:56:66:11:9d:b7:c1:70:85: b9:59:d4:e3:84:ba:84:76:94:9f:31:69:b9:f6:82:fc:4a:e4: 49:b0:67:be:bc:39:5f:b9:15:02:29:4d:06:4d:1a:81:db:d0: 7a:63:48:9d:5b:06:3d:9d:9f:b1:5c:f5:3f:f2:34:f7:05:d6: fe:b6:fd:f3:ee:16:36:cb:9d:a3:42:95:78:65:b9:17:fe:7f: 4d:89:83:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1qmQpOR64krg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MjdjMDQwYjEtOTRjYi00MTI1LTkzMTAtOWI2M2Y2ZWM1ZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQxBSZes10GK3ePykpolRLrOQiISBqDTEfQD 3i8nuuTGPAl6ekOCLulef+KY50empcB6uKitXZZipAt04UXnBBMA14hm+a3JoqZQ 1ZpMHEq4+jjUEMk5aRrJEdYm7dQqBSFeV2JutdGLzaAMlrT2+bDHZLJDJvp7D/1m EIVcWlO8S4G36Dyq8GuEreMEe7UgMsfXJND9JiHIsLMJA8t7Q6jl+Uw3zYwg98MO 08ZMLCFOwgQ8wigT4SKe/TwbP8Z+vRJwg/JhPqYpt343M/me5IpkoczXy4YsEVjS Hlmai6kSoFxG+vO4l7klrYhGsavZp9X7HE1YgmyXcdouJS+11wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJxlUSdo2ljcsyl1301X1CdtwLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDNlMDkwNGUtYjNkZC0z OWI1LWE1ZjUtZTIzN2UzOGJiNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGaILTv76tzak56LmwyUfG1uCEXosCLrE4iosIFB+NFvwgfj8fpBmFi fYZucQDCAHw7rgN3V3TSywS8AQV3xwBxSNtShbK/vIb1TYVOkQWqbA8k2kqJKXCd 7nf78quPF6/ZQYaz4T8yjWSb0yt3VT9vrsXJ8IrsklKucci9Dg0CYUyGocgrvw7K 6P2Bp3+oMjU76VXdmmuhG46YKtGa2rO3zvf5NQYQqTXkNNpWZhGdt8FwhblZ1OOE uoR2lJ8xabn2gvxK5EmwZ768OV+5FQIpTQZNGoHb0HpjSJ1bBj2dn7Fc9T/yNPcF 1v62/fPuFjbLnaNClXhluRf+f02Jg+I= -----END CERTIFICATE-----Generated at Sun Jul 20 20:15:30 2025 by rpki-client